Graph Deep Dive - Speaker Deck

Slide 1

Slide 1 text

‹#› Kosho Owa, Solutions Architect, Elastic April 12th, 2016 Graph Deep Dive Elastic{ON} Mini-Recap

Slide 2

Slide 2 text

Elastic Cloud Security Monitoring Alerting Graph X-Pack Kibana User Interface Elasticsearch Store, Index,  & Analyze Ingest Logstash Beats + Elastic Stack, X-Pack, Cloud and Graph Elastic Stack

Slide 3

Slide 3 text

Graphͷ Ϣʔεέʔε

Slide 4

Slide 4 text

ϦεΫΛ໌Β͔ʹ͢Δ ΫϨδοτΧʔυͷར༻ཤྺΑΓ • ͲͷΑ͏ͳళฮͰෆਖ਼ʹར༻͞Ε͍ͯΔ͔ • Χʔυ൪߸͕ྲྀग़ͨ͠ݪҼ͸ ΦϯϥΠϯήʔϜͷӡӦͰ • ෆਖ਼ʹΞΠςϜΛೖख͢ΔϢʔβͷಛ௃͸Կ͔ • ΞΠςϜͷෆਖ਼औҾʹ࢖༻͞Ε͍ͯΔӅޠ͸Կ͔

Slide 5

Slide 5 text

ؔ܎ੑΛൃݟ͢Δ ϑΝΠΞ΢ΥʔϧͷϩάΑΓ • ෆਖ਼ͳ֎෦΁ͷSSH઀ଓΛݟ෼͚Δʹ͸ • ΢Πϧεײછ͕ೝΊΒΕͨ࣌ʹɺଞͷײછPCΛಛఆ ͍ͨ͠ ϩʔϯͷར༻ • ઐۀओ්͸ςϨϏΛങ͏ͨΊʹϩʔϯͰ͖Δ͔ • ֎ࠃਓ࿑ಇऀ͸ϚϯγϣϯΛߪೖͰ͖Δ͔

Slide 6

Slide 6 text

“Ϩίϝϯυ”͢Δ ΦϯϥΠϯγϣοϐϯάαΠτͰ • ϏʔϧΛߪೖ͢Δஉੑʹ͸ԿΛקΊΔ͔ • ϛΩαʔΛݕࡧ͍ͯ͠ΔϢʔβ͕Ӿཡ͍ͯ͠Δ঎඼͸ Կ͔ SNSͷ޷͖ͳΞʔςΟετͷϦετΑΓ • ϞʔπΞϧτ޷͖ͷχϫΧΫϥογοΫϑΝϯ͕࣍ʹ ฉ͘΂͖͸ • ೔ຊɾγϯΨϙʔϧͷ༑޷ͷՍ͚ڮͱͳΔԻָՈ͸?

Slide 7

Slide 7 text

σʔλ

Slide 8

Slide 8 text

{ "title": "Elastic{ON} Recap Seminar", "date": "2016-04-12", "venue": "SAP Japan", "location": “35.6845063, 139.7397771", "organizer": ["Classmethod", "Elastic"], "capacity": 200, "confirmed": true, "created_at": "2016-03-01T01:01:01.000Z” } σʔλ͸ϑϥοτͰ͸ͳ͍ ༷ʑͳσʔλλΠϓͱߏ଄

Slide 9

Slide 9 text

σʔλؒͷؔ࿈ ಉ͡өը͕޷͖ͳϖΞΛݟ͚ͭΔͷ͸ࠎ͕ંΕΔ { "name": “John Stiles", "birthday": "1976-08-07", “favorite_movies”: [“star wars”, “anchorman”, “dodge ball”] } { "name": “Richard Roe", "birthday": "1982-11-21", “favorite_movies”: [“forrest gump”, “talladega nights”, “anchorman”] }

Slide 10

Slide 10 text

ϊΠζͱઓ͏

Slide 11

Slide 11 text

‹#› ๫ྗ൜ࡑͷ98%͸ɺ ύϯΛ৯΂͔ͯΒ24࣌ؒҎ಺ʹ ൃੜ͍ͯ͠Δ ΞϝϦΧͰͷௐࠪ݁Ռ

Slide 12

Slide 12 text

δοϓ(Zipf)ͷ๏ଇ 16% 84%

Slide 13

Slide 13 text

Graphͷ࣮૷

Slide 14

Slide 14 text

GET apache-2015.09/_search { "size": 0, "query": { "filtered": { "query": { "query_string": { "query": "response:304" }}}}, "aggs": { "2": { "significant_terms": { "field": "geoip.ip.raw", "size": 5 }}}} “Significant Term” Aggregation Apacheͷϩά͔Β߈ܸݩΛಛఆ͢Δ

Slide 15

Slide 15 text

GET apache-2015.09/_graph/explore { "controls": { "use_significance": true }, "vertices": [{ "field": "response", "include": [ { "term": “304" }]}], "connections": { "vertices": [ { "field": “geoip.country_name.raw”, "size": 5 }]}} `_graph` API ߈ܸͷιʔεʹͳ͍ͬͯΔࠃΛಛఆ͢Δ

Slide 16

Slide 16 text

GraphϢʔβʔΠϯλʔϑΣΠε ΞϝϦΧ͔Β઀ଓ͍ͯ͠ΔIPΞυϨεΛಛఆ͢Δ

Slide 17

Slide 17 text

Graphͷར఺

Slide 18

Slide 18 text

Graphͷར఺ • ୳ࡧΛՄೳʹ͢ΔAPIͱUI • Plug-in/X-Packͱͯ͠ͱ༰ қʹಋೖͰ͖Δ • طଘͷJOEFYͰ࣮ߦͰ͖Δ • ෼ࢄ؀ڥͰಇ͘ • /FBSSFBMUJNF Graph as X-Pack Elasticsearch